Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa
File:                     12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json)
Hash identifier:          Amb0UpAjz0DozVM2ZE1l1CSSGBg0u2ZwJMrqXFMAMVM=
Subject key identifier:   84:38:FB:F5:94:CB:19:F3:E0:91:75:8F:2B:9F:87:46:89:97:AD:8A
Certificate issuer:       /CN=086f01d4-c895-4205-9b95-29c50942197b
Certificate serial:       010D0C9F4328584E253EEFDF79159A82DA6EAB60
Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     7050
IP address blocks:        129.89.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ef:df:79:15:9a:82:da:6e:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=7fd59de1-1606-49f6-bad7-eaa5de502420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:62:d7:b7:f3:87:73:e4:0f:d2:c9:48:17:
                    61:fa:ad:47:9f:84:2a:ba:be:26:11:2c:27:0b:5a:
                    ea:c6:e4:70:88:a8:83:c2:79:e2:58:fd:0c:51:e6:
                    3a:dd:f2:78:da:66:93:1d:07:b4:55:02:96:2d:fc:
                    64:42:da:f0:86:f8:81:8c:3b:97:bd:1a:4f:df:7c:
                    82:0e:25:cd:99:51:f2:40:1d:7a:88:a2:9c:d6:43:
                    8e:80:4b:12:65:02:80:8a:a1:11:6c:80:38:71:14:
                    74:c5:a3:7b:a2:32:ad:4e:f5:87:c5:ad:46:5e:51:
                    d6:1a:74:fb:01:0f:0d:34:82:a2:0b:50:82:65:c3:
                    60:29:39:31:ae:8a:53:2d:d0:79:52:de:72:57:37:
                    18:8b:b0:6b:93:f7:25:4a:1c:06:1e:36:85:c9:11:
                    2b:6a:d5:19:0b:7a:6b:19:97:df:d8:1a:c1:c9:6c:
                    a1:4c:33:55:07:64:28:8b:72:ae:63:00:64:4f:cc:
                    da:10:19:95:7f:d7:d3:ac:5e:a8:f8:6f:00:37:aa:
                    36:42:07:20:b1:75:c4:a3:0c:b3:66:34:da:58:c0:
                    c8:c4:78:65:44:01:27:74:7f:9f:5e:79:30:64:f5:
                    ce:62:f2:c8:b6:80:33:80:26:a7:b4:c7:00:b5:a8:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:38:FB:F5:94:CB:19:F3:E0:91:75:8F:2B:9F:87:46:89:97:AD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:af:37:e9:c5:b4:ff:13:26:db:c3:dc:43:6c:65:54:b2:
         41:05:44:a4:db:fb:7f:09:5f:b0:43:47:ec:7d:65:2a:76:09:
         da:a8:32:99:12:89:dd:12:2c:82:a5:7d:6e:b9:63:1e:70:55:
         5a:56:a4:06:c7:d7:0d:d0:38:10:25:70:5c:94:0a:57:61:56:
         27:6e:03:4b:55:36:db:f1:ba:62:38:5f:c8:a0:5f:ad:65:58:
         a8:34:aa:c7:ce:ce:f1:1f:9b:63:b0:3c:1d:c5:e6:b7:dd:10:
         d4:ac:3b:a0:54:06:b1:73:73:89:e4:d5:47:88:6d:07:a2:5d:
         15:22:72:69:e9:49:96:66:a4:e7:2b:f0:6a:80:f0:90:60:5f:
         00:35:0e:b2:39:c1:0d:bd:a7:d5:8f:e1:99:f9:82:e2:d5:55:
         17:26:c9:9e:e7:92:e1:02:bd:08:16:4e:d2:b8:3e:db:cf:71:
         0a:7c:be:ae:7d:a0:6d:b4:df:1d:78:2e:41:c9:24:c4:8c:a3:
         8f:66:55:63:e2:6b:76:d6:14:8f:1e:24:86:80:74:18:c5:94:
         ee:72:45:6d:50:8f:2e:98:eb:25:5b:87:80:37:07:0c:54:1b:
         ee:1a:98:89:69:53:b8:53:b2:ab:ba:91:aa:15:8d:52:0c:f9:
         5b:00:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:15:31 2026 by rpki-client